Karin O. Cisa Crisc Email & Phone Number

Highly skilled and results-driven IT Security Professional with over 7 years of experience providing Governance, Risk and Compliance auditing, and remediation, utilizing ISO27001, NIST 800-53,PCI-DSS, FIPS, and FISMA. Well-rounded understanding of information security risks, IT hygiene and remediation. Advanced skills in risk-based audit, internal control, management directives (policies, standards and procedures), risk assessment, IT Application Controls (ITACs), business continuity/disaster recovery and IT General Computer Controls (ITGCs). Experienced with industry IAM, Audit and GRC tools Like AuditBoard, process Unity, CyberArk, BeyondTrust, ServiceNow, RSA Archer and OneTrust. ensuring that organizations not only meet but exceed regulatory standards. With a profound understanding of information security risks, IT hygiene, and remediation, I have effectively managed diverse client and company needs.My expertise extends to conducting risk-based audits, developing and implementing internal controls, and performing comprehensive risk assessments. I am adept at using industry-standard IAM, audit, and GRC tools like AuditBoard, CyberArk, and RSA Archer to enhance security measures and drive compliance. Throughout my career, I have led internal audits, managed large-scale audit projects, and overseen critical compliance programs, demonstrating my capability to handle complex security challenges and deliver results.What sets me apart is my ability to translate intricate security requirements into actionable strategies that mitigate risks and ensure organizational resilience. My proactive approach in identifying vulnerabilities, coupled with my skill in developing remediation plans, has consistently safeguarded information assets and maintained compliance with stringent regulations. By conducting security awareness training and collaborating with stakeholders, I have fostered a culture of security consciousness, reinforcing my role as a trusted advisor and leader in the information security landscape.